IPS: Update sid-msg.map

Reference: http://oinkmaster.sourceforge.net/faq.shtml You need to update the sid-msg.map in order for the events to show its description, if sid-msg.map is not updated the events will be like Snort Alert [1:19187:2]. To update the sid-msg.map download the tar file from oinkmaster. Inside the tar file contains a perl script create-sidmap.pl. Use this perl script to update … Continue reading IPS: Update sid-msg.map

Advertisements